shockrah
4a210404bb
Adding temper.tv cert
2023-10-06 00:09:24 -07:00
shockrah
82f34d03cd
Fixing certs that get attached to the LB
2023-10-06 00:08:14 -07:00
shockrah
a83debde34
Validation and cert created for tmper
2023-10-05 23:41:18 -07:00
shockrah
d02b5de48c
Splitting certs into lone files
2023-10-05 23:16:49 -07:00
shockrah
df2406720f
Improving dependency chaingin slightly however more will stablize the race condition problem here in this folder
2023-10-05 23:12:39 -07:00
shockrah
b6aebf06b1
Bringing in tmeper records to track
2023-10-05 23:08:27 -07:00
shockrah
da379f20cb
Moving remaining s3 configuration to its own folder
2023-10-05 22:43:35 -07:00
shockrah
9bd6cbd3e3
Fixing makefile
2023-10-05 22:28:54 -07:00
shockrah
b0e5bd50da
Moving out route53 and load balancer resources
2023-10-05 22:20:06 -07:00
shockrah
3029fbb3f6
Moving fargate things to their own folder
2023-10-04 01:15:32 -07:00
shockrah
caf09a63cb
More variable clean up for security groups
...
Removing traces from previous networking cleanout
2023-10-03 19:38:27 -07:00
shockrah
e51ebc7251
Moving security groups out to their own folder as they are basically global to everything
2023-10-03 19:36:59 -07:00
shockrah
609f9b3e7b
Moving networking code out into its own module
2023-10-03 19:07:06 -07:00
shockrah
10ed1f1a98
Adding note regarding master record with special record
2023-09-30 16:26:17 -07:00
shockrah
295f933d8a
Terraform code cleanup and final reduction of containers from 2 -> 1
...
Now able to serve multiple websites with 1 nginx container under an LB
Cost savings not massive but still noticable at this point considering
How low the cost is with this kind of setup
2023-09-10 16:25:21 -07:00
shockrah
b5e53acf0a
Adding health check endpoint to nginx container
2023-09-10 16:23:54 -07:00
shockrah
efdd75b831
Fresh readme
2023-09-10 15:51:35 -07:00
shockrah
830352a851
MVP nginx configuration for single container support
2023-09-10 15:36:47 -07:00
shockrah
50c6bfeac0
switching to borderline vanilla nginx docker image
2023-09-10 15:21:27 -07:00
shockrah
6b75b2534e
Simplifying build and run scripts for general & pipeline usage
2023-09-10 15:20:50 -07:00
shockrah
9cd2fe11db
Updating readme
2023-09-10 15:16:17 -07:00
shockrah
9ca3969a53
Ensuring public read access to all required public buckets
...
* Required to allow task containers to read from here without crazy auth on
nginx's part
2023-09-10 15:10:22 -07:00
shockrah
d9e0e8c70b
Making public files for websites buckets public readable
2023-08-09 21:51:21 -07:00
shockrah
4987559b15
Adding readme for playbooks
2023-05-07 23:53:41 -07:00
shockrah
87a549bc1f
* Load balancer components are now built dynamically for each domain
...
+ Increased health_check intervals
+ HTTPS default action is now a blank 400 page
+ Generating listener rules for beta proxy based on bucket names/domains
Using domain filters for this basically
* Dynamically attaching listener certificates
2023-03-10 21:37:35 -08:00
shockrah
ffe5ffe831
Cleaning up Docker resources
...
Adding ez build script
2023-03-10 21:35:55 -08:00
shockrah
f4e06fa24a
New docker image supporting proxying S3
2023-03-10 21:34:58 -08:00
shockrah
42e55f7313
Task definition now uses the correct image and env vars
...
Services are now mapped to their respective task definitions
2023-03-10 21:34:06 -08:00
shockrah
28f8436768
Using new s3 access & secret key for s3 reader role
2023-03-10 21:33:24 -08:00
shockrah
dfdc62f80c
Consolidating locals into one place
...
Also adding -input=false to Makefile
2023-03-10 21:32:56 -08:00
shockrah
17d3f66073
Simplifying nginx vars
2023-03-06 18:35:07 -08:00
shockrah
550cb2eb70
Removing unused infra structure, lowering cost with this commit
2023-03-06 15:51:43 -08:00
shockrah
8f375def3b
Updating bucket names to include blog and resume
2023-02-28 21:04:26 -08:00
shockrah
0f96719383
Dockerfile for proxying s3 resources with nginx
2023-02-28 20:20:21 -08:00
shockrah
91bb927cf5
Fixing nginx conf to return 404 on things it cant find rather than index.html
2023-02-14 18:53:11 -08:00
shockrah
321734a453
Adding redirect for 80 which was causing issues on folder path calls to nginx
2023-02-14 18:52:23 -08:00
shockrah
f973c67bb4
Fixing indentation from vim
2023-02-11 21:19:08 -08:00
shockrah
5903ba2a5e
Updating nginx config to now include resume.shockrah.xyz in the fun :)
...
Also nginx.conf now has some gzip configuration parameters set, courtesy of:
https://www.techrepublic.com/article/how-to-configure-gzip-compression-with-nginx/
2023-02-11 21:14:49 -08:00
shockrah
11ffc23871
Cleaning up DNS Records and updating certs to account for root domains
...
For now we're just going to worry about the main blog and resume.shockrah.xyz
In the reverse-proxy image
* Resume pipelines will not work in this state and will need way of updating
their part of the image for ECS to pull updates*
2023-02-11 20:56:52 -08:00
shockrah
904b730362
blog.shockrah.xyz working at an infrastructure level now
...
Also updated the image so that it has the right baseURL
which gets configured during the service build ( Hugo )
2023-02-10 22:07:26 -08:00
shockrah
53267daf99
Avoiding hard coded values and improving cluster name
2023-02-10 21:30:20 -08:00
shockrah
203ec7f434
Docker image required files
2023-02-10 21:29:50 -08:00
shockrah
1170e879f0
Consolidating roles for ecr and logging
2023-02-10 21:28:49 -08:00
shockrah
5e978b5766
Creating s3 bucket for static content
2023-01-21 16:58:11 -08:00
shockrah
57965a2a5a
Replacing target group with proper shockrah.xyz group
2023-01-10 00:28:27 -08:00
shockrah
01e6d7f990
Attaching project-athen.xyz cert onto alpha LB SSL listener
2023-01-09 21:13:19 -08:00
shockrah
8481a5f123
Creating base certificates for shockrah and project-athens.xyz
2023-01-09 21:12:19 -08:00
shockrah
99bc6be5c9
Removing sample infra
2023-01-09 18:21:26 -08:00
shockrah
d71c4780d9
Merge branch 'feature/alpha-cluster-sample'
2023-01-09 17:05:56 -08:00
shockrah
5c79b44ceb
Removing pointless ufw rule
2023-01-09 17:05:19 -08:00
shockrah